CVE-2025-57712
Medium · 6.5CVSS
6.5
EPSS
0.5%
Published
Nov 7, 2025
CISA due date
—
The record
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.3 ( 2025/08/28 ) and later
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|